SQA DojoISTQB Exam Prep

ISTQB Practice Test 1: 40 Questions with Answers

Paper 1 is the one to sit first. It leans towards recall and understanding - what the terms mean, what the seven principles say, which activity belongs to which test level - so a low score here usually means the vocabulary has not settled yet rather than that the techniques are beyond you.

All 40 questions are on this page with their answers and explanations, so you can work through them at your own pace. This paper is fixed and shares no questions with the other two papers, so a second attempt measures what you have learned rather than what you have memorised.

What is in this paper

By cognitive level: 9 K1 (recall), 31 K2 (understanding) and 0 K3 (application). The real exam is weighted roughly 20% K1, 60% K2 and 20% K3, with a 65% pass mark over 60 minutes.

How to get the most from this paper

If you struggle with this paper, more practice tests are not the fix. Go back to the glossary and the chapter notes, because the questions that beat you are the ones asking you to recognise a definition. Flashcards will move your score faster than another attempt.

Prefer exam conditions?

Sit this paper against a 60-minute clock, one question at a time, with the answers hidden until you submit. Your score is marked against the 65% pass threshold.

Practice Test 1 questions and answers

Each question shows its options first. Open the toggle to see the correct answer and why it is correct.

  1. 1. A payment module repeatedly produces incorrect totals. Analysis traces this to a coding defect, made because the team had received no training on the applicable rounding rules. In this chain, what is the lack of training?

    Cognitive level K2
    • A.The root cause
    • B.The defect
    • C.The failure
    • D.The error
    Show answer and explanation

    Correct answer: A. The root cause

    The root cause is the origin of the problem: removing it prevents the defect recurring. The ambiguous specification is what led to the coded defect and the observed failures.

  2. 2. What distinguishes the test management role from the testing role?

    Cognitive level K2
    • A.The testing role is responsible for approving the release
    • B.The test management role writes the test cases and the testing role approves them
    • C.The test management role handles planning, monitoring, control and completion; the testing role handles analysis, design, implementation and execution
    • D.The test management role is always performed by a separate person
    Show answer and explanation

    Correct answer: C. The test management role handles planning, monitoring, control and completion; the testing role handles analysis, design, implementation and execution

    CTFL v4.0 describes these two principal roles, and notes that one person may take on both depending on context.

  3. 3. A system fails in the field, but investigation shows no error was made by any person during development. What is the MOST likely explanation?

    Cognitive level K2
    • A.Every failure must be caused by a defect in the code
    • B.A failure can be caused by environmental conditions, such as radiation or electromagnetic fields affecting firmware
    • C.The tester must have made an error in reporting
    • D.The system cannot have failed if there is no defect
    Show answer and explanation

    Correct answer: B. A failure can be caused by environmental conditions, such as radiation or electromagnetic fields affecting firmware

    The syllabus notes that failures may arise from environmental conditions rather than from a defect introduced by a person.

  4. 4. In which situation does the syllabus say a whole team approach may NOT be appropriate?

    Cognitive level K2
    • A.Any project using an iterative lifecycle
    • B.Projects where testers and developers sit in the same room
    • C.Safety-critical development, where a high level of test independence may be needed
    • D.Projects that use automated regression testing
    Show answer and explanation

    Correct answer: C. Safety-critical development, where a high level of test independence may be needed

    The syllabus notes that the whole team approach may not be appropriate in every context; safety-critical work can require a higher degree of test independence than a fully shared model provides.

  5. 5. A code review identifies a defect in a module that has never been executed. Which debugging step is NOT required, and why?

    Cognitive level K2
    • A.Reproduction, because static testing finds defects directly and cannot cause failures
    • B.Diagnosis, because the review tool assigns a severity to each finding
    • C.Fixing, because a finding from a review is a recommendation rather than a defect
    • D.Confirmation testing, because no failure was logged against the module
    Show answer and explanation

    Correct answer: A. Reproduction, because static testing finds defects directly and cannot cause failures

    Section 1.1.2 states that when static testing identifies a defect, debugging is concerned with removing it, and that there is no need for reproduction or diagnosis since static testing directly finds defects and cannot cause failures.

  6. 6. Besides testing, which of the following is a form of quality control?

    Cognitive level K1
    • A.Simulation and prototyping
    • B.Measuring code complexity with a static analysis tool
    • C.Process improvement programmes
    • D.Collecting failure reports from operations after release
    Show answer and explanation

    Correct answer: A. Simulation and prototyping

    Section 1.2.2 states that testing is a major form of quality control, while others include formal methods such as model checking and proof of correctness, simulation, and prototyping.

  7. 7. Which TWO of the following are test completion work products?

    Cognitive level K2

    Choose 2.

    • A.Test logs recorded during test runs
    • B.Change requests, for example as product backlog items
    • C.Documented lessons learned
    • D.Coverage items identified for each test condition
    Show answer and explanation

    Correct answer: B. Change requests, for example as product backlog items | C. Documented lessons learned

    Section 1.4.3 lists change requests, for example as product backlog items, among the test completion work products.

    Section 1.4.3 lists documented lessons learned among the test completion work products.

  8. 8. A team checks that the system meets users' and other stakeholders' needs in its operational environment. Which aspect of testing is this?

    Cognitive level K2
    • A.Debugging
    • B.Static analysis
    • C.Verification
    • D.Validation
    Show answer and explanation

    Correct answer: D. Validation

    Section 1.1 states that testing involves verification, checking whether the system meets specified requirements, and also validation, which means checking whether the system meets users and other stakeholders needs in its operational environment.

  9. 9. A team measures how the system behaves over a 72-hour continuous run, including recovery after induced failures. Which test type is this?

    Cognitive level K1
    • A.Testing that a user can complete a purchase
    • B.Reliability testing
    • C.Testing that a discount is calculated correctly
    • D.Testing that an API returns the specified fields
    Show answer and explanation

    Correct answer: B. Reliability testing

    Reliability is one of the ISO/IEC 25010 non-functional quality characteristics listed in 2.2.2; it concerns how well the system maintains service under stated conditions rather than which functions it provides.

  10. 10. A defect fix is delivered. Which two activities should follow, and in what relationship?

    Cognitive level K2
    • A.Only regression testing is required
    • B.Only confirmation testing is required
    • C.Confirmation testing to verify the fix, then regression testing to check nothing else broke
    • D.Regression testing first, then confirmation testing
    Show answer and explanation

    Correct answer: C. Confirmation testing to verify the fix, then regression testing to check nothing else broke

    Confirmation testing re-runs the test that failed. Regression testing then checks that the change has not adversely affected other behaviour.

  11. 11. Which of the following would MOST appropriately serve as the test basis for system testing?

    Cognitive level K2
    • A.Business processes and user requirements
    • B.Interface specifications between separately deployed systems
    • C.Detailed design and the code itself
    • D.Specifications for the system as a whole, such as system and software requirement specifications and use cases
    Show answer and explanation

    Correct answer: D. Specifications for the system as a whole, such as system and software requirement specifications and use cases

    Section 2.2.1 states that system testing focuses on the overall behavior and capabilities of an entire system or product, and is related to specifications for the system.

  12. 12. How does the choice of software development lifecycle model affect testing?

    Cognitive level K2
    • A.It determines which quality characteristics the product must satisfy
    • B.It has no effect, because testing is independent of development
    • C.It determines the number of defects the product will contain
    • D.It affects the scope and timing of test activities, the level of detail of test documentation, the choice of techniques, the extent of automation and the tester's role
    Show answer and explanation

    Correct answer: D. It affects the scope and timing of test activities, the level of detail of test documentation, the choice of techniques, the extent of automation and the tester's role

    2.1.1 lists these as the impacts of the chosen software development lifecycle on testing.

  13. 13. Which of the following is a risk or challenge of DevOps rather than a benefit?

    Cognitive level K2
    • A.The risk of regression is reduced
    • B.The need for repetitive manual testing is reduced
    • C.Feedback on code quality arrives quickly
    • D.The CI/CD tools have to be introduced and then maintained
    Show answer and explanation

    Correct answer: D. The CI/CD tools have to be introduced and then maintained

    Section 2.1.4 lists the risks and challenges of DevOps as: the delivery pipeline must be defined and established, CI/CD tools must be introduced and maintained, and test automation requires additional resources and may be difficult to establish and maintain.

  14. 14. Where are the results of a retrospective normally recorded?

    Cognitive level K1
    • A.In the test plan for the next iteration
    • B.In the risk register
    • C.In the defect report for each anomaly discussed
    • D.In the test completion report
    Show answer and explanation

    Correct answer: D. In the test completion report

    Section 2.1.6 states that the results of a retrospective should be recorded and are normally part of the test completion report.

  15. 15. Component integration testing is heavily dependent on which of the following?

    Cognitive level K2
    • A.The availability of a usability lab
    • B.The availability of a test environment similar to the operational environment
    • C.The involvement of the intended users of the system
    • D.The integration strategy, such as bottom-up, top-down or big-bang
    Show answer and explanation

    Correct answer: D. The integration strategy, such as bottom-up, top-down or big-bang

    Section 2.2.1 states that component integration testing focuses on the interfaces and interactions between components and is heavily dependent on the integration strategy, giving bottom-up, top-down and big-bang as examples.

  16. 16. A defect fix must be released urgently and there is very little time for testing. To what may confirmation testing be restricted?

    Cognitive level K2
    • A.Performing an impact analysis instead of executing any tests
    • B.Reviewing the code change without executing it
    • C.Exercising the test steps that should reproduce the failure and checking that it no longer occurs
    • D.Running the full regression suite for the affected component
    Show answer and explanation

    Correct answer: C. Exercising the test steps that should reproduce the failure and checking that it no longer occurs

    Section 2.2.3 states that when time or money is short when fixing defects, confirmation testing might be restricted to simply exercising the test steps that should reproduce the failure caused by the defect and checking that the failure does not occur.

  17. 17. Which statement about static testing is TRUE?

    Cognitive level K2
    • A.Static testing replaces the need for reviews
    • B.Static testing can find defects that dynamic testing cannot reach, such as requirement ambiguities
    • C.Static testing always requires a tool
    • D.Static testing can only be performed after code is written
    Show answer and explanation

    Correct answer: B. Static testing can find defects that dynamic testing cannot reach, such as requirement ambiguities

    Ambiguities, contradictions, omissions and untestable statements are only detectable by examining the work product.

  18. 18. Which role in a formal review records the anomalies raised during the review meeting?

    Cognitive level K1
    • A.The scribe
    • B.The manager
    • C.The author
    • D.The moderator
    Show answer and explanation

    Correct answer: A. The scribe

    The scribe (recorder) collates the anomalies raised and records decisions during the review meeting.

  19. 19. Which review type has no defined process, no documented results and no formal roles?

    Cognitive level K1
    • A.Inspection
    • B.Informal review
    • C.Walkthrough
    • D.Technical review
    Show answer and explanation

    Correct answer: B. Informal review

    An informal review has no defined process and produces no formally documented results, which is what distinguishes it.

  20. 20. During which review activity is it confirmed that every participant has access to the work product and understands their role and responsibilities?

    Cognitive level K1
    • A.Individual review
    • B.Review planning
    • C.Review initiation
    • D.Communication and analysis
    Show answer and explanation

    Correct answer: C. Review initiation

    During initiation the work product is distributed and the objectives, process and criteria are explained so participants can prepare.

  21. 21. Who decides which people participate in a formal review and takes overall responsibility for it?

    Cognitive level K1
    • A.The author
    • B.The scribe
    • C.The review leader
    • D.The reviewers
    Show answer and explanation

    Correct answer: C. The review leader

    The review leader takes overall responsibility for the review and decides who participates, along with the timing and location.

  22. 22. Which of the following is a typical objective of a walkthrough?

    Cognitive level K2
    • A.Educating reviewers about the work product and gaining consensus on it
    • B.Demonstrating compliance with a regulatory standard
    • C.Measuring the code coverage achieved by the test suite
    • D.Collecting metrics to improve the review process itself
    Show answer and explanation

    Correct answer: A. Educating reviewers about the work product and gaining consensus on it

    A walkthrough is led by the author and serves objectives such as evaluating quality, educating participants, and reaching agreement.

  23. 23. In acceptance test-driven development (ATDD), when are the acceptance tests created?

    Cognitive level K2
    • A.Before implementation begins, collaboratively by business, development and testing
    • B.During system testing, from the requirements
    • C.After the code is written, by the testers
    • D.Only after acceptance testing has failed
    Show answer and explanation

    Correct answer: A. Before implementation begins, collaboratively by business, development and testing

    ATDD writes the acceptance tests first and uses them as the shared specification, which makes it a defect-prevention practice.

  24. 24. Which TWO of the following are black-box test techniques?

    Cognitive level K2

    Choose 2.

    • A.State transition testing
    • B.Branch testing
    • C.Equivalence partitioning
    • D.Statement testing
    Show answer and explanation

    Correct answer: A. State transition testing | C. Equivalence partitioning

    State transition testing derives tests from a specified model of states and events, not from the code.

    Equivalence partitioning derives tests from the specified value domain without reference to internal structure.

  25. 25. A user story reads "As a customer I want to save my basket so I can return to it later". Which item is an acceptance criterion rather than part of the story?

    Cognitive level K2
    • A.As a customer I want to save my basket
    • B.The basket table will use a composite primary key
    • C.The basket contents are still present after the customer logs out and back in within 30 days
    • D.The basket feature is estimated at five story points
    Show answer and explanation

    Correct answer: C. The basket contents are still present after the customer logs out and back in within 30 days

    An acceptance criterion states a condition that must be met for the story to be accepted. Basket contents persisting across a logout within 30 days is objectively checkable.

  26. 26. What is the difference between valid transition (0-switch) coverage and all transitions coverage?

    Cognitive level K2
    • A.All transitions coverage applies only to models with fewer than five states
    • B.0-switch coverage requires every valid transition; all transitions coverage additionally requires every invalid transition to be attempted
    • C.They are two names for the same criterion
    • D.0-switch coverage requires every state to be visited; all transitions coverage requires every transition
    Show answer and explanation

    Correct answer: B. 0-switch coverage requires every valid transition; all transitions coverage additionally requires every invalid transition to be attempted

    All transitions coverage requires test cases to exercise all valid transitions and attempt to execute the invalid ones shown as empty cells in the state table. Only one invalid transition should be attempted per test case, to avoid defect masking.

  27. 27. Which THREE-part approach is commonly used for collaborative user story writing?

    Cognitive level K2
    • A.Given, When, Then
    • B.Card, Conversation, Confirmation
    • C.Analyse, Design, Implement
    • D.Plan, Do, Check
    Show answer and explanation

    Correct answer: B. Card, Conversation, Confirmation

    The three Cs describe the story as a written placeholder (card), the discussion that fills in the detail (conversation), and the acceptance criteria that confirm it (confirmation).

  28. 28. Which TWO of the following are experience-based test techniques?

    Cognitive level K2

    Choose 2.

    • A.Exploratory testing
    • B.Branch testing
    • C.Decision table testing
    • D.Error guessing
    Show answer and explanation

    Correct answer: A. Exploratory testing | D. Error guessing

    Exploratory testing relies on the tester's knowledge and skill, with learning, design and execution happening concurrently.

    Error guessing draws on the tester's experience of how systems typically fail to anticipate where defects are likely.

  29. 29. In a session-based approach, how are test objectives treated?

    Cognitive level K2
    • A.As exit criteria for the test level
    • B.As defect severity classifications
    • C.As high-level test conditions
    • D.As acceptance criteria for a user story
    Show answer and explanation

    Correct answer: C. As high-level test conditions

    In session-based testing the objectives in the charter may be treated as high-level test conditions, with coverage items identified and exercised during the session.

  30. 30. How should checklist items be phrased so that they can be applied reliably?

    Cognitive level K2
    • A.As a defect report template
    • B.As a narrative paragraph describing the feature
    • C.As a broad statement covering several concerns at once
    • D.As a question that can be checked separately and directly
    Show answer and explanation

    Correct answer: D. As a question that can be checked separately and directly

    Checklist items are often phrased as questions, and each should be checkable on its own without depending on other items.

  31. 31. Which metric measures test progress?

    Cognitive level K2
    • A.Number of testers
    • B.Defects found
    • C.% test cases executed
    • D.Code complexity
    Show answer and explanation

    Correct answer: C. % test cases executed

    The percentage of planned test cases executed is a direct measure of progress against plan.

  32. 32. What is the purpose of a test plan?

    Cognitive level K1
    • A.Describe testing approach
    • B.Log defects
    • C.Write code
    • D.Manage developers
    Show answer and explanation

    Correct answer: A. Describe testing approach

    A test plan documents the objectives, scope, approach and resources for testing.

  33. 33. What is the main purpose of exit criteria?

    Cognitive level K2
    • A.Fix defects
    • B.Define test completion
    • C.Write test cases
    • D.Start test execution
    Show answer and explanation

    Correct answer: B. Define test completion

    Exit criteria define the conditions that must be met for a test activity or level to be considered complete.

  34. 34. Which prioritization strategy runs the test case achieving the highest coverage first, then each subsequent test case by the highest additional coverage it contributes?

    Cognitive level K2
    • A.Requirements-based prioritization
    • B.Risk-based prioritization
    • C.Additional coverage prioritization
    • D.Contingency prioritization
    Show answer and explanation

    Correct answer: C. Additional coverage prioritization

    In this variant of coverage-based prioritization, the highest-coverage test runs first and each subsequent test is chosen for the highest additional coverage it contributes.

  35. 35. From a testing perspective, what is the goal of product risk analysis?

    Cognitive level K2
    • A.To remove all product risk before release
    • B.To provide awareness of product risk so that test effort is focused in a way that minimises residual risk
    • C.To determine the total number of test cases required
    • D.To identify which testers should work on which features
    Show answer and explanation

    Correct answer: B. To provide awareness of product risk so that test effort is focused in a way that minimises residual risk

    The goal is to direct effort where it reduces remaining product risk most, not to eliminate risk entirely.

  36. 36. A distributed team spans three time zones. Why might the syllabus favour more formal communication of test status here?

    Cognitive level K2
    • A.Because formal reports are required by regulation in all industries
    • B.Because distributed teams produce more defects
    • C.Because verbal communication is never appropriate for test status
    • D.Because direct face-to-face communication is not always possible across geographical distance and time differences
    Show answer and explanation

    Correct answer: D. Because direct face-to-face communication is not always possible across geographical distance and time differences

    The syllabus notes that more formal communication may be more appropriate for distributed teams for exactly this reason.

  37. 37. Which TWO of the following are purposes of a test plan?

    Cognitive level K2

    Choose 2.

    • A.It guarantees that no defects will remain at release
    • B.It replaces the need for a test strategy
    • C.It helps ensure that the performed test activities will meet the established criteria
    • D.It serves as a means of communication with team members and other stakeholders
    Show answer and explanation

    Correct answer: C. It helps ensure that the performed test activities will meet the established criteria | D. It serves as a means of communication with team members and other stakeholders

    A test plan helps ensure the activities carried out will satisfy the criteria that were established for them.

    Communication is one of the stated purposes of a test plan.

  38. 38. The syllabus notes that a reported anomaly may not be a real defect. At what point is this determined?

    Cognitive level K2
    • A.The report is deleted without record
    • B.The tester is required to justify the report to management
    • C.During the defect management process of dealing with the defect reports
    • D.It is automatically reclassified as a change request
    Show answer and explanation

    Correct answer: C. During the defect management process of dealing with the defect reports

    The process resolves whether the anomaly is a real defect, a false-positive result, or something else such as a change request.

  39. 39. What does the testing quadrants model help test management to ensure?

    Cognitive level K2
    • A.That every test is automated
    • B.That defects are assigned to the correct developer
    • C.That all appropriate test types and test levels are included in the lifecycle
    • D.That testing is completed within budget
    Show answer and explanation

    Correct answer: C. That all appropriate test types and test levels are included in the lifecycle

    The model helps visualise the combinations so that no appropriate test type or level is overlooked, and shows that some types suit certain levels more than others.

  40. 40. Which of the following is a RISK of test automation rather than a benefit?

    Cognitive level K1
    • A.Greater consistency and repeatability of execution
    • B.More objective assessment, such as coverage measurement
    • C.The effort of maintaining the automated tests is underestimated
    • D.Reduction of repetitive manual work
    Show answer and explanation

    Correct answer: C. The effort of maintaining the automated tests is underestimated

    Underestimating the time, cost and effort of introducing and maintaining a tool is one of the named risks of test automation.

Keep practising